[Freeipa-users] Upgrade fail 3.3.3 (rhel7) to 4.1 (rhel7.1)

[Martin Basti]

On 02/04/15 16:57, Christoph Kaminski wrote:
> Hi all!
>
> We have 6 IPA Servers here connected to each other. We want to upgrade 
> all from RHEL 7 with IPA 3.3.3 to RHEL 7.1with IPA 4.1.
>
> I have done it one of the 6 servers and got a problem.
>
> After upgrade if I want to login to Web UI I get: "*IPA-Error 903: 
> InternalError*" after typing the credentials...
> I have activated debug output of IPA and see this in 
> /var/log/httpd/error_log:
>
> [Thu Apr 02 14:39:38.848474 2015] [:error] [pid 18020] ipa: ERROR: 
> non-public: KeyError: 'idnsforwardzone'
> [Thu Apr 02 14:39:38.848536 2015] [:error] [pid 18020] Traceback (most 
> recent call last):
> [Thu Apr 02 14:39:38.848600 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 348, 
> in wsgi_execute
> [Thu Apr 02 14:39:38.848607 2015] [:error] [pid 18020]     result = 
> self.Command[name](*args, **options)
> [Thu Apr 02 14:39:38.848612 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 439, in 
> __call__
> [Thu Apr 02 14:39:38.848671 2015] [:error] [pid 18020]     ret = 
> self.run(*args, **options)
> [Thu Apr 02 14:39:38.848701 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 754, in run
> [Thu Apr 02 14:39:38.848707 2015] [:error] [pid 18020]     return 
> self.execute(*args, **options)
> [Thu Apr 02 14:39:38.848776 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py", line 
> 123, in execute
> [Thu Apr 02 14:39:38.848783 2015] [:error] [pid 18020]     (o.name, 
> json_serialize(o)) for o in self.api.Object()
> [Thu Apr 02 14:39:38.848789 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/plugins/internal.py", line 
> 123, in <genexpr>
> [Thu Apr 02 14:39:38.848794 2015] [:error] [pid 18020]     (o.name, 
> json_serialize(o)) for o in self.api.Object()
> [Thu Apr 02 14:39:38.848799 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/util.py", line 60, in 
> json_serialize
> [Thu Apr 02 14:39:38.848804 2015] [:error] [pid 18020]     return 
> json_serialize(obj.__json__())
> [Thu Apr 02 14:39:38.848809 2015] [:error] [pid 18020]   File 
> "/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py", line 
> 710, in __json__
> [Thu Apr 02 14:39:38.848814 2015] [:error] [pid 18020]     attrs = 
> self.api.Backend.ldap2.schema.attribute_types(objectclasses)
> [Thu Apr 02 14:39:38.848820 2015] [:error] [pid 18020]   File 
> "/usr/lib64/python2.7/site-packages/ldap/schema/subentry.py", line 
> 377, in attribute_types
> [Thu Apr 02 14:39:38.848825 2015] [:error] [pid 18020]     
> object_class = self.sed[ObjectClass][object_class_oid]
> [Thu Apr 02 14:39:38.848830 2015] [:error] [pid 18020] KeyError: 
> 'idnsforwardzone'
>
> I have found this bug report: 
> https://bugzilla.redhat.com/show_bug.cgi?id=1180325
> It should be fixed in the last version?!
>
> I have read there I should start: setup-ds.pl -d --update
>
> But Im afraid that it kills the date on the IPA Servers with version 
> 3.3.3... does it?
>
> What can I do? how can I fix it?
>
> Greetz
> Christoph Kaminski
>
>
>
Hello, was the ipa upgrade successful? Do you have any errors in 
/var/log/ipaupgrade.log?

If you think it is 1180325 issue you can check if nsSchemaPolicy is in 
01core389.ldif:
grep -i nsSchemaPolicy /etc/dirsrv/slapd-INSTANCE/schema/01core389.ldif
grep -i nsSchemaPolicy /etc/dirsrv/schema/01core389.ldif

Martin

-- 
Martin Basti

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150402/f84349f6/attachment.htm>